A case of AIS spoofing

Yesterday, the OSINT community was surprised by a trace that appeared on the maritime tracking website Marine Traffic indicating that the Russian cruiser Marshal Ustinov was sailing near the Strait of Gibraltar. The Marshal Ustinov, a Slava-class cruiser (the same class as the Moskva, which was sunk in the Black Sea by a Ukrainian missile), was in the Mediterranean until the end of August when it returned to Russia.

So how was it possible that it reappeared in the Mediterranean without anyone noticing (and without anyone, particularly the Russian Ministry of Defense, announcing it)? While the Suez Canal is an “uncontrolled” area and it has already happened that Russian units have passed through it without anyone’s knowledge, the situation is different in Gibraltar where naval spotters are numerous.

The answer is simple: that trace is not the Marshal Ustinov (which is currently in Severomorsk, Russia).

Actually, this is a case of AIS spoofing. The AIS spoofing  is an AIS ( Automatic Identification Systems) manipulation, including location and identity. Within the concept of AIS spoofing, there are multiple tactics involving the use of various identities, transmitters, and even GNSS manipulation methodologies that are evolving quickly compared to previous deceptive shipping practices.

Who carried out this action and why is not known, but at the moment, no new Russian units are reported to have entered the Mediterranean.